Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
File: EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft (raw, json)
Hash identifier: M2qcq/bU95XEPYJQHMEFJtQkggabeWMI5Cz41TpMXOc=
Subject key identifier: F5:3B:4C:44:EF:73:AE:98:93:C8:50:F7:FA:C1:27:D3:55:E0:DC:F8
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Certificate issuer: /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial: 019675D55EAB3C29A5C1CFCCD316F6E5F62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
Manifest number: 071D
Signing time: Sun 27 Apr 2025 06:00:39 +0000
Manifest this update: Sun 27 Apr 2025 06:00:39 +0000
Manifest next update: Mon 28 Apr 2025 06:00:39 +0000
Files and hashes: 1: 5cdSX-zrncWspL0K6fL133Q3uNs.roa (hash: RtUr90lsO7bvirIbH36Twsg4zf98Kyt3Rbxenxpq4mM=)
2: EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl (hash: Vnjx88/gHBXNUxJUExEzE/EGHjm85alVJeO3cb4KOhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:5e:ab:3c:29:a5:c1:cf:cc:d3:16:f6:e5:f6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Validity
Not Before: Apr 27 06:00:39 2025 GMT
Not After : Apr 28 06:00:39 2025 GMT
Subject: CN=f53b4c44ef73ae9893c850f7fac127d355e0dcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4f:c5:b0:c9:17:0b:eb:23:b2:16:78:9a:46:
52:77:d2:a1:de:c9:b8:3a:7d:88:bc:a3:94:3d:f0:
eb:59:92:57:4a:7e:68:a1:9d:50:67:bd:77:25:44:
3b:98:bc:f2:47:11:b2:b7:cb:d8:80:ef:7a:42:df:
29:38:f2:c4:f3:21:14:63:c4:63:b2:16:8d:31:03:
1b:f4:e3:84:3f:d3:c0:5e:6e:b2:47:86:b9:99:70:
29:66:23:3a:4a:59:e4:b4:80:76:18:25:20:ac:50:
e0:04:d0:f9:9d:5c:75:d8:cc:18:3f:a2:14:ec:79:
54:bd:5f:c5:c7:a5:72:4e:7b:99:9e:e7:c4:20:1e:
3d:da:28:ff:48:c9:d1:52:f6:34:80:ba:6d:ce:12:
0e:a8:74:5a:85:73:25:e4:1a:21:e5:f9:52:2f:aa:
b1:f8:6f:ca:e3:5d:79:ac:71:fa:7b:0a:84:2a:85:
3e:c9:1d:da:e1:ba:42:aa:c7:99:13:1f:69:ef:bb:
fe:60:59:3f:92:37:31:7a:a0:bf:58:72:26:fb:2f:
18:46:5c:61:48:62:0c:f6:c7:3c:27:43:66:4a:0d:
b9:9e:17:14:f8:3b:b3:d0:f7:77:b2:93:5e:7b:71:
09:d1:21:21:85:12:4b:dc:35:d2:60:45:97:78:58:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3B:4C:44:EF:73:AE:98:93:C8:50:F7:FA:C1:27:D3:55:E0:DC:F8
X509v3 Authority Key Identifier:
keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ee:ae:0a:77:78:78:12:a3:d5:44:31:0b:a5:8d:86:55:02:
8b:57:dd:a4:82:42:c9:74:bd:6f:7d:2f:dd:5c:05:95:1b:3e:
2b:77:0e:c2:b5:c3:9c:14:ab:e5:6f:8f:b9:70:79:1f:cf:99:
93:73:58:4d:52:65:b7:c8:76:ef:83:ff:83:e0:67:c9:c2:e2:
3a:4b:fd:77:3b:0e:09:cc:d6:7c:f8:00:d6:62:96:64:55:16:
9a:0f:fb:53:f3:55:9f:bc:76:31:80:90:31:20:65:67:e7:b8:
90:b1:db:b8:69:a7:27:86:0a:4a:3e:f9:38:ff:a4:b5:79:0a:
5c:59:04:40:1a:c0:2d:97:ce:50:8b:18:c1:cd:be:09:23:7c:
2f:a1:75:ad:d6:a0:47:0b:4e:fc:e2:a5:17:8a:82:69:5b:51:
bd:05:0c:8b:90:25:55:1d:78:77:68:1d:8f:6d:c6:70:78:c2:
6f:74:33:7c:f9:f8:24:63:2c:76:ac:be:72:dc:99:3c:55:91:
74:3c:a5:af:da:e0:d8:b7:09:23:19:70:1d:73:3d:a4:37:1c:
16:9c:3f:60:f4:c7:f2:a2:6a:3a:d5:ac:b8:5a:da:b4:42:c3:
b9:f3:da:4f:4c:8f:23:e3:50:11:9f:26:af:89:e5:4c:71:4b:
ad:ad:a1:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ11V6rPCmlwc/M0xb25fYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYWI1N2FiMGU5NjUxODY3OTExNGNiZjBlZThhZjU0YmJm
ZGE1ZjUwHhcNMjUwNDI3MDYwMDM5WhcNMjUwNDI4MDYwMDM5WjAzMTEwLwYDVQQD
EyhmNTNiNGM0NGVmNzNhZTk4OTNjODUwZjdmYWMxMjdkMzU1ZTBkY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E/FsMkXC+sjshZ4mkZSd9Kh3sm4
On2IvKOUPfDrWZJXSn5ooZ1QZ713JUQ7mLzyRxGyt8vYgO96Qt8pOPLE8yEUY8Rj
shaNMQMb9OOEP9PAXm6yR4a5mXApZiM6SlnktIB2GCUgrFDgBND5nVx12MwYP6IU
7HlUvV/Fx6VyTnuZnufEIB492ij/SMnRUvY0gLptzhIOqHRahXMl5Boh5flSL6qx
+G/K4115rHH6ewqEKoU+yR3a4bpCqseZEx9p77v+YFk/kjcxeqC/WHIm+y8YRlxh
SGIM9sc8J0NmSg25nhcU+Duz0Pd3spNee3EJ0SEhhRJL3DXSYEWXeFiK+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPU7TETvc66Yk8hQ9/rBJ9NV4Nz4MB8GA1UdIwQY
MBaAFBCrV6sOllGGeRFMvw7or1S7/aX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNjFhYzItNmUyNy00ZDRlLWFiOWUt
ZjM4MGJmMGZkZDg0LzEvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNjFhYzItNmUyNy00ZDRlLWFiOWUtZjM4MGJmMGZkZDg0
LzEvRUt0WHF3NldVWVo1RVV5X0R1aXZWTHY5cGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeO6uCnd4
eBKj1UQxC6WNhlUCi1fdpIJCyXS9b30v3VwFlRs+K3cOwrXDnBSr5W+PuXB5H8+Z
k3NYTVJlt8h274P/g+BnycLiOkv9dzsOCczWfPgA1mKWZFUWmg/7U/NVn7x2MYCQ
MSBlZ+e4kLHbuGmnJ4YKSj75OP+ktXkKXFkEQBrALZfOUIsYwc2+CSN8L6F1rdag
RwtO/OKlF4qCaVtRvQUMi5AlVR14d2gdj23GcHjCb3QzfPn4JGMsdqy+ctyZPFWR
dDylr9rg2LcJIxlwHXM9pDccFpw/YPTH8qJqOtWsuFratELDufPaT0yPI+NQEZ8m
r4nlTHFLra2hjQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:21:07 2025 by rpki-client